These are the service providers that may process personal data when you use VANE it. Each is bound by a data processing agreement. We will update this page and email account holders at least 30 days before adding a new subprocessor, as our Data Processing Addendum sets out.
| Provider | What it does for VANE it | Data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Database, customer sign-in and sign-in emails, image storage | Customer accounts and content, visitor answers, IP pseudonyms, waitlist | United States | Supabase DPA with EU Standard Contractual Clauses and UK Addendum |
| Cloudflare, Inc. | Website hosting and delivery, security, privacy-friendly web analytics (no cookies) | Connection data such as IP address and browser type; pages viewed on vaneit.com | Global network, headquartered in the United States | Cloudflare DPA; EU-US Data Privacy Framework certified; Standard Contractual Clauses |
| Stripe, Inc. (from when billing launches) | Payments and invoices | Billing name, email, payment details (card numbers stay with Stripe) | United States | Stripe DPA; EU-US Data Privacy Framework certified; Standard Contractual Clauses |
To be told about changes, email contact@vaneit.com and ask to join the subprocessor update list.